Custom Approval for new Identity

IdentityIQ (IIQ) IIQ Discussion and Questions
1

V8.4,

We have developed a custom form for identity creation and the approval needs to go to a System Admin user. I am passing the name of the approver to approval set, but still approval is not going to the approver. Attached is the workflow.. Can anyone help what went wrong
service account workflow.txt (5.9 KB)

Centered Text

2

Hi @himabindu306 ,

The approvalScheme variable is set to none in your workflow, which means the request will proceed without any approval.

<Variable initializer="none" input="true" name="approvalScheme"/>

Change the approvalSchme to one of below

 <Variable initializer="owner" input="true" name="approvalScheme">
    <Description>
      A csv string that specifies how approval items should be generated
      for the incoming request.

      The value can be "none", in which case approvals are disabled.

      The value can also be a combination of any of the values below
      in any order, separated by commas. The order in which they are
      specified is the order in which they are processed:

      owner
        The object owner gets the approval item.
        For Role approvals this is the Role object owner.
        For Entitlement approvals this is the Entitlement object owner.

      manager
        The manager gets the approval item.

      securityOfficer
        The identity in the variable securityOfficerName gets the approval item.

      identity
        The identities/workgroups in the variable approvingIdentities get the approval item.
    </Description>
  </Variable>
3

Tried updating approvalScheme to identity and have put the name of approver in approvingIdentities variable. But still the issue persists.
service account workflow.txt (5.9 KB)

4

Hi @himabindu306 ,

Add the approvingIdentities argument to provision changes step in your workflow and check.

 <Arg name="approvingIdentities" value="ref:approvingIdentities"/>
5

Added approvingIdentites as an argument to provision changes step. But still the issue persists.

6

@himabindu306 LCM Create and Update will accept,

manager or newManager.

<Variable initializer="newManager" input="true" name="approvalScheme"/>

You will these details in LCM Create and Update workflow. let me know if that works or you tried already ?

Also, is there any reason you put below step after lcm create and update ? approvers value you might need before calling the LCM Create and Update workflow.

<Step action="rule:MBZUAI_ServiceAccount_Approvers" icon="Default" name="Calculate Approvers" posX="879" posY="22" resultVariable="approvers">
    <Transition to="Build Provisioning Plan"/>
  </Step>
7

Hi @himabindu306 ,

You can set approvalScheme to securityOfficer and securityOfficerName to System Admin, and pass these parameters to the LCM Create and Update workflow.
This will generate an approval work item that gets assigned to the System Admin.
Please refer the workflow.
Test_workflow.xml (5.8 KB)
.

  <Variable initializer="System Admin" name="securityOfficerName"/>
  <Variable initializer="securityOfficer" input="true" name="approvalScheme"/>
8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.